493d483f34b6b5c7b349978c5ff92160_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

493d483f34b6b5c7b349978c5ff92160_NeikiAnalytics.exe
Size

5.1MB
MD5

493d483f34b6b5c7b349978c5ff92160
SHA1

2126563d9160cbadd704d62412dc7dc64d3ad2f4
SHA256

ea820b1a0702488cced1dc96ed78244d6671f7758a764b297d2afb15fb2037f6
SHA512

21af1cf4e9ea880b0a942f3af3e36b2430a7da56b941f3414b0eaa9a0d9ebaafc8f3c333cbfd70e96b9eea8dc3ed221ef9be96fd47c1c5ab205bfdeb18b1188b
SSDEEP

98304:dow0xjDyFDRUl34AP5K7qlzJ9PHP4n9Ht4FRzR+j5igs:dGxjWF2h5CqdHe9HtudR

Score

1^/10

Malware Config

Signatures

Files

493d483f34b6b5c7b349978c5ff92160_NeikiAnalytics.exe
.dll windows:4 windows x64 arch:x64

b97fc80a1bb3f370669e3644482f0897

Code Sign

f8:23:e9:7f:b7:ae:0b:f7:67:60:7e:b9:1c:c4:e7:64
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17-05-2021 00:00

Not After

16-05-2024 23:59

Subject

CN=Circle Systems\, Inc,O=Circle Systems\, Inc,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:a8:63:49:31:b7:3e:42:2c:9a:92:81:00:fb:05:88:3a:06:53:e1:95:09:64:0f:2d:01:ec:19:e3:ab:69:c3
Signer

Actual PE Digest

d9:a8:63:49:31:b7:3e:42:2c:9a:92:81:00:fb:05:88:3a:06:53:e1:95:09:64:0f:2d:01:ec:19:e3:ab:69:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\st_flat_12\release\win64\statrn64.pdb

Imports

iconv

libiconv_close
libiconv_open
libiconv
locale_charset

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

DisableThreadLibraryCalls
GetCurrentProcessId
SwitchToThread
Sleep
UnmapViewOfFile
GetLocaleInfoW
GetLocaleInfoA
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
GetSystemDirectoryW
OutputDebugStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
CloseHandle
IsBadReadPtr
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateFileW
ReadFile
WriteFile

ole32

CoCreateInstance
CoBuildVersion
CoInitialize
CoInitializeSecurity
CLSIDFromProgID

oleaut32

VariantClear
SafeArrayGetElement
VariantInit
SysFreeString

msvcrt

sprintf
strlen
strncpy
atoi
isalpha
isdigit
memset
memcpy
strcmp
malloc
tolower
strchr
toupper
ungetc
realloc
fclose
strtok
strcat
memmove
_splitpath
fprintf
isalnum
memcmp
atof
longjmp
isprint
fgetc
ftell
fseek
strpbrk
_strcmpi
qsort
_getcwd
vsprintf
_wfopen
_waccess
_wremove
_vsnprintf
strncmp
strtol
strstr
fopen
abs
_setjmp
islower
isupper
localtime
time
sscanf
modf
isspace
fputs
calloc
_makepath
wcscpy
wcslen
towupper
_errno
floor
putc
fwrite
fread
getc
strftime
_lseeki64
setvbuf
_iob
_telli64
_filelengthi64
_read
mbstowcs
printf
wcstombs
_snprintf
asctime
gmtime
bsearch
rand
frexp
fflush
fmod
srand
_isnan
_finite
setlocale
sqrt
mktime
pow
fgets
strrchr
fputc
memchr
atol
strtoul
ctime
_strtoi64
strerror
localeconv
_HUGE
strtod
_wopen
_initterm
free
_strnicmp
_strupr
_swab
_mktemp
_open
_close
_strlwr
_write

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

Exports

Exports

ST_AddUserVar
ST_AreValueLabelsPresent
ST_CellGetColWidths
ST_CellGetData
ST_CellGetDataStr
ST_CellGetDataVB
ST_CellGetNColsInRow
ST_CellGetNRowsInSheet
ST_CellGetRowHandle
ST_CenturyOn
ST_CheckSASNames
ST_CloseEncoder
ST_CloseEnvironment
ST_CloseFiles
ST_ComplexFileGet
ST_ComplexFileSet
ST_CopyErrorMsg
ST_CopyVarDataNumb
ST_CopyVarDataStr
ST_CopyVarLabel
ST_CopyVarName
ST_DBGetParm
ST_DBGetParmVB
ST_DBGetSource
ST_DBGetSourceEx
ST_DBReadSources
ST_DBReadSourcesEx
ST_DBSetParm
ST_DefineAsciiVar
ST_DoVarSelect
ST_EncodeData
ST_FileHasVarLabels
ST_FileInfoGetIndex
ST_FileInfoGetInfo
ST_FileInfoGetPtr
ST_FormatHasMembers
ST_FormatHasTables
ST_FormatIDate
ST_FromIDate
ST_GetCasesDropped
ST_GetCasesMoved
ST_GetDLLVersion
ST_GetDatasetExtAttrCount
ST_GetDatasetExtAttrName
ST_GetDatasetExtAttrNumValue
ST_GetDatasetExtAttrStrValue
ST_GetDatasetExtAttrType
ST_GetDatasetInfo
ST_GetErrorMsg
ST_GetFileDescription
ST_GetInputVarName
ST_GetMemberName
ST_GetNCases
ST_GetNTables
ST_GetNValueLabels
ST_GetNativeFormat
ST_GetPercentTransferred
ST_GetQualifiedTname
ST_GetTType
ST_GetTableName
ST_GetValueLabel
ST_GetValueLabelExt
ST_GetValueLabelStr
ST_GetVarAddress
ST_GetVarData
ST_GetVarDataExt
ST_GetVarDataVB
ST_GetVarExtAttrCount
ST_GetVarExtAttrName
ST_GetVarExtAttrNumValue
ST_GetVarExtAttrStrValue
ST_GetVarExtAttrType
ST_GetVarInfo
ST_GetVarLabel
ST_GetVarMissing
ST_GetVarNDec
ST_GetVarName
ST_GetVarPrintWidth
ST_GetVarSelect
ST_GetVarType
ST_GetVarTypeExt
ST_GetWksLabel
ST_GetWksNPages
ST_GetWksNRanges
ST_GetWksNameStat
ST_GetWksPageName
ST_GetWksRangeCoord
ST_GetWksRangeName
ST_GetWksStartPage
ST_GetWksStartRow
ST_HRF_ToIDate
ST_IdateToMdy
ST_IncHdrRow
ST_InitReadOnly
ST_InitReadOnlyEx
ST_InitUserDict
ST_InitUserDictEx
ST_MdyToIdate
ST_MemOptimizeInit
ST_OLE_Init
ST_OleNoInit
ST_OpenEncoder
ST_OpenEnvironment
ST_OpenEnvironmentEx
ST_OpenInputFile
ST_OpenOutFile
ST_OptimizeClose
ST_OptimizeDo
ST_OptimizeInit
ST_OptimizeInitEx
ST_OptimizeInitExInt
ST_OptimizeInitIntEx
ST_OptimizeRecord
ST_OptionGetInfo
ST_ParseWhere
ST_PreserveCase
ST_RandInt
ST_ReadDict
ST_ReadMembers
ST_ReadRecord
ST_RestorePosn
ST_SavePosn
ST_SelectAllVars
ST_SelectAllVarsExt
ST_SetCallbackFunc
ST_SetDateFmt
ST_SetDateFmtEx
ST_SetDictOption
ST_SetDictVarToString
ST_SetFirstMember
ST_SetFirstTable
ST_SetGauss96
ST_SetInfoCallback
ST_SetMember
ST_SetMissingValueLabel
ST_SetNValueLabels
ST_SetNaString
ST_SetOldVersion
ST_SetOption
ST_SetOptionDefineStr
ST_SetOptionStrStr
ST_SetOutBtOrd
ST_SetOutputOptions
ST_SetSasStyle
ST_SetStataVer4
ST_SetTType
ST_SetTable
ST_SetTrialMode
ST_SetValueLabel
ST_SetValueLabelExt
ST_SetVarAnyFromStr
ST_SetVarData
ST_SetVarDouble
ST_SetVarInfo
ST_SetVarLabel
ST_SetVarMissing
ST_SetVarMissingExt
ST_SetVarSelect
ST_SetVarSelectName
ST_SetVarString
ST_SetWindowHandle
ST_SetWksCellNote
ST_SetWksColWidth
ST_SetWksMinStrWidth
ST_SetWksNameRow
ST_SetWksNoVnames
ST_SetWksPage
ST_SetWksRange
ST_SetWksRangeWithName
ST_SetWksRangeWithNumb
ST_SetWksReadFromBottom
ST_SetWksReadMode
ST_SetWksRetNullRows
ST_SetWksUseNullCol
ST_SetWksWriteHeading
ST_ToIDate
ST_TransferAllRecords
ST_TransferData
ST_TransferNRecords
ST_TransferOneRecord
ST_Txt000Punct
ST_TxtCenturyCutoff
ST_TxtCurrencyMark
ST_TxtDateOrder
ST_TxtDatePunct
ST_TxtDecimalPoint
ST_TxtDelimiter
ST_TxtLookMaxLines
ST_TxtMaxCols
ST_TxtMaxLineWidth
ST_TxtQuoteChar
ST_TxtReadVnames
ST_TxtSetRange
ST_TxtWriteCentury
ST_TxtWritePrecision
ST_TxtWriteSchema
ST_TxtWriteVnames
ST_UseGFormat
ST_VarNameMadeUp
ST_WriteRecord
ST_WriteVnames
ST_WriteWksText
Split_Path

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 386KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2.2MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b97fc80a1bb3f370669e3644482f0897

Code Sign

f8:23:e9:7f:b7:ae:0b:f7:67:60:7e:b9:1c:c4:e7:64Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

d9:a8:63:49:31:b7:3e:42:2c:9a:92:81:00:fb:05:88:3a:06:53:e1:95:09:64:0f:2d:01:ec:19:e3:ab:69:c3Signer

Headers

File Characteristics

PDB Paths

Imports

iconv

version

kernel32

ole32

oleaut32

msvcrt

rpcrt4

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 377KB - Virtual size: 376KB

.data Size: 386KB - Virtual size: 573KB

.pdata Size: 39KB - Virtual size: 38KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2.2MB - Virtual size: 7.1MB

.v-lizer Size: 39KB - Virtual size: 39KB

f8:23:e9:7f:b7:ae:0b:f7:67:60:7e:b9:1c:c4:e7:64
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

d9:a8:63:49:31:b7:3e:42:2c:9a:92:81:00:fb:05:88:3a:06:53:e1:95:09:64:0f:2d:01:ec:19:e3:ab:69:c3
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 377KB - Virtual size: 376KB

.data
Size: 386KB - Virtual size: 573KB

.pdata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2.2MB - Virtual size: 7.1MB

.v-lizer
Size: 39KB - Virtual size: 39KB